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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

Listing of Claims: 

Claim 1 (currently amended): A computer-implemented method for use in a 
network environment including an enterprise server, comprising: 

storing at the enterprise server multiple security credentials for a remote 
user to access respective secure resources residing on a network employing a 
generic application layer network protocol; 

maintaining a map between one or more resource servers and a type of 
security credential required to access each resource server; 

receiving at the enterprise server a signal representing a request from a 
the remote user for a first of the secure resources , wherein the request includes 
a logon credential for the remote user ; 

determining, by referring to the map and without the intervention of the 
user, the type of security credential for the remote user that is required to access 
the first secure resource; ar^ 

sending from the server a signal representing a second request to retrieve 
the first secure resource, the second request including a first of the security 
credentials for the user of the type required to access the first secure resource; 

receiving at the server a signal representing a first sinqle-siqn-on (SSO) 
credential generated bv a first SSQ provider based on the logon credential; 

sending from the server a signal representing the first SSO credential to 

retrieve the first secure resource when the type of credential required to access 
the first secure resource includes the first SSO credential: and 

sending from the server a siqnal representinq the first SSO credential to 
retrieve the first secure resource when the tvpe of credential required to access 
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the first secure resource includes a second SSO credential corresponding to a 
second SSO provider having a trust relationship with the first SSQ provider . 

Claim 2 (original): The method of claim 1, further comprising: 

authenticating the user before sending the signal representing the second 
request. 

Claim 3 (previously presented): The method of claim 1 , further comprising: 
receiving at the server a signal representing a response to the second 
request; and 

sending from the server a signal representing a result to the remote user, 
the result based on the response to the second request. 

Claim 4 (previously presented): The method of claim 1 , wherein the request 
includes a logon credential for the remote user, the method further comprising: 
authenticating the remote user based on the logon credential before sending the 
second request. 

Claim 5 (previously presented): The method of claim 1 , wherein the request 
includes a logon credential for the remote user and the type of security credential 
required to access the first secure resource includes the logon credential, the 
method further comprising: 

sending the signal representing the second request to retrieve the first 
secure resource, the second request including the logon credential. 

Claim 6 (canceled): 

Claim 7 (canceled): 

Claim 8 (currently amended): The method of c l a i m 6, furth e r compr i s i ng: 
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A connputer-innplemented method for use in a a network environment including 
an enterprise server, comprising: 

storing at the enterprise server multiple security credentials for a remote 

user to access respective secure resources residing on a network employing a 
generic application layer network protocol: 

maintaining a map between one or more resource servers and a type of 

security credential required to access each resource server: 

receiving at the enterprise server a signal representing a request from a 

the remote user for a first of the secure resources, wherein the request includes 
a logon credential for the remote user: 

determining, by referring to the map and without the intervention of the 

user, the type of security credential for the remote user that is required to access 
the first secure resource: 

sending from the server a signal representing a second request to retrieve 

the first secure resource, the second request including a first of the security 
credentials for the user of the type required to access the first secure resource: 

receiving at the server a signal representing a first single-sign-on (SSQ) 

credential generated bv a first SSO provider based on the logon credential: 

sending from the server a signal representing the first SSO credential to 

retrieve the first secure resource when the type of credential required to access 
the first secure resource Includes the first SSO credential: 

receiving at the server a signal representing a second SSO credential 
generated by a second SSO provider based on the first SSO credential; and 

sending from the server a signal representing the second SSO credential 
to retrieve the first secure resource when the type of credential required to 
access the first secure resource includes the second SSO credential. 

Claim 9 (original): The method of claim 1 , wherein the generic application-layer 
network protocol is hypertext transfer protocol. 
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Claim 10 (previously presented): The method of claim 9, further comprising: 
receiving at the server a signal representing data in response to the 

second request; and 

sending from the server a signal representing at least a portion of the data 

to the remote user. 

Claim 1 1 (previously amended): The method of claim 10, wherein the first 
secure resource includes a Web site, and the data is hypertext mark-up 
language. 

Claim 12 (currently amended): Tho method of c l a i m 1 . A computer-implemented 
method for use in a a network environment including an enterprise server, 
comprising: 

storing at the enterprise server multiple securitv credentials for a remote 

user to access respective secure resources residing on a network emploving a 
generic application layer network protocol: 

maintaining a map between one or more resource servers and a type of 

securitv credential reouired to access each resource server: 

receiving at the enterprise server a signal representing a reguest from a 

the remote user for a first of the secure resources, wherein the reguest includes 
a logon credential for the remote user; 

determining, bv referring to the map and without the intervention of the 

user, the type of securitv credential for the remote user that is reguired to access 
the first secure resource: 

sending from the server a signal representing a second reguest to retrieve 

the first secure resource, the second reouest including a first of the securitv 
credentials for the user of the type reguired to access the first secure resource, 
wherein the receiving includes receiving at the server a signal representing a 
third request from the remote user for a second of the secure resources residing 
on the network, the method further compr i s i ng: 
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determining, without the intervention of the user, the type of security 
credential for the remote user that is required to access the second secure 

resource; and 

sending from the server a signal representing a fourth request for 
retrieving the second secure resource, the fourth request including a second of 
the security credentials for the user of the type required to access the second 
secure resource; and wherein the signals representing the second and fourth 

requests are sent concurrently. 

Claim 13 (previously presented): The method of claim 12, wherein the types of 
security credentials included in the second and fourth requests differ. 

Claim 14 (previously presented): The method of claim 12, wherein the types of 
security credentials included in the second and fourth requests are the same. 

Claim 15 (currently amended): Th e m e thod of c lai m 1 , furth e r compr i s i ng: 
A computer-implemented method for use in a a network environment 
including an enterprise server, comprising: 

storing at the enterprise server multiple security credentials for a remote 

user to access respective secure resources residing on a network employing a 
generic application layer network protocol: 

maintaining a map between one or more resource servers and a type of 

security credential required to access each resource server: 

receiving at the enterprise server a signal representing a request from a 

the remote user for a first of the secure resources, wherein the request includes 
a logon credential for the remote user: 

determining, by referring to the map and without the intervention of the 

user, the type of security credential for the remote user that is required to access 
the first secure resource: 
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sending from the server a signal representing a second request to retrieve 

the first secure resource, the second request including a first of the security 
credentials for the user of the type required to access the first secure resource, 
receiving at the server a signal representing the first security credential 
from the user before receiving the signal representing the first request. 

Claim 16 (cancelled): 

Claim 17 (currently amended): An apparatus for use in a network environment 
including an enterprise server, comprising: 

means for storing at the enterprise server multiple security credentials for 
a remote user to access respective secure resources residing on a network 
employing a generic application layer network protocol; 

means for maintaining a map between one or more resource servers and 
a type of security credential required to access each resource server; 

means for receiving at the server a signal representing a request from a 
the remote user for a first of the secure resources; 

means for determining, by referring to the map and without the 
intervention of the user, the type of security credential for the remote user that is 
required to access the first secure resource; &r4 

means for sending from the server a signal representing a second request 
to retrieve the first secure resource, the second request including a first of the 
security credentials for the user of the type required to access the first secure 
resource , wherein the request includes a logon credential for the remote user: 
means for receiving at the server a signal representing a first single-sign- 
on (SSO) credential generated bv a first SSO provider based on the looon 
credential: 

means for sending from the server a signal representing the first SSO 

credential to retrieve the first secure resource when the type of credential 
required to access the first secure resource includes the first SSO credential: and 
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means for sending from the server a signal representing the first SSO 

credential to retrieve the first secure resource when the type of credential 
required to access the first secure resource includes a second SSO credential 
corresponding to a second SSO provider having a trust relationship with a first 
SSO provider . 

Claim 18 (original): The apparatus of claim 17, further comprising: 

means for authenticating the user before sending the signal representing 
the second request. 

Claim 19 (previously presented): The apparatus of claim 17, further comprising: 
means for receiving at the server a signal representing a response to the 

second request; and 

means for sending from the server a signal representing a result to the 

remote user, the result based on the response to the second request. 

Claim 20 (previously presented): The apparatus of claim 17, wherein the 
request includes a logon credential for the remote user, the apparatus further 
comprising: 

means for authenticating the remote user based on the logon credential 
before sending the second request. 

Claim 21 (previously presented): The apparatus of claim 17, wherein the 
request includes a logon credential for the remote user and the type of security 
credential required to access the first secure resource includes the logon 
credential, the apparatus further comprising: 

means for sending from the server the signal representing the second 
request to retrieve the first secure resource, the second request including the 
logon credential. 
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Claim 22 (canceled): 

Claim 23 (canceled): 

Claim 24 (currently amended): Th e apparatus of c l a i m 22, furth e r compr i s i ng: 
An apparatus for use in a network environment including an enterprise 
server, comprising: 

means for storing at the enterprise server multiple security credentials for 

a remote user to access respective secure resources residing on a network 
emploving a generic application laver network protocol: 

means for maintaining a map between one or more resource servers and 

a type of security credential recuired to access each resource server: 

means for receiving at the server a signal representing a recuest from a 

the remote user for a first of the secure resources: 

means for determining, by referring to the map and without the 

intervention of the user, the type of security credential for the remote user that is 
required to access the first secure resource: api4 

means for sending from the server a signal representing a second recuest 

to retrieve the first secure resource, the second recuest including a first of the 
security credentials for the user of the type recuired to access the first secure 
resource, wherein the request includes a logon credential for the remote user: 
means for receiving at the server a signal representing a second SSO 
credential generated by a second SSO provider based on the first SSO 
credential; and 

means for sending from the server a signal representing the second SSO 
credential to the secure resource when the type of credential required to access 
the secure resource includes the second SSO credential. 

Claim 25 (original): The apparatus of claim 17, wherein the generic application- 
layer network protocol is hypertext transfer protocol. 
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Claim 26 (previously presented): The apparatus of claim 25, further comprising: 
means for receiving at the server a signal representing data in response to 

the second request; and 

means for sending from the server a signal representing at least a portion 

of the data to the remote user. 

Claim 27 (previously presented): The apparatus of claim 26, wherein the first 
secure resource includes a Web site, and the data is hypertext mark-up 
language. 

Claim 28 (previously presented): The apparatus of claim 17, wherein the means 
for receiving includes means for receiving at the server a signal representing a 
third request from the remote user for a second secure resource residing on the 
network, the apparatus further comprising: 

means for determining, without the intervention of the user, the type of 
security credential for the remote user that is required to access the second 
secure resource; and 

means for sending from the server a signal representing a fourth request 
to retrieve the second secure resource, the fourth request including a second of 
the security credentials for the user of the type required to access the second 
secure resource; and 

wherein the signals representing the second and fourth requests are sent 
concurrently. 

Claim 29 (previously presented): The apparatus of claim 28, wherein the types 
of security credentials included in the second and fourth requests differ. 

Claim 30 (previously presented): The apparatus of claim 28, wherein the types 
of security credentials included in the second and fourth requests are the same. 
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Claim 31 (previously presented): The apparatus of claim 17, further comprising: 

means for receiving at the server a signal representing the first security 
credential from the user before receiving the signal representing the first request. 

Claim 32 (cancelled): 

Claim 33 (currently amended): One or more computer-readable media tangibly 
embodying a program of instructions executable by a computer to perform a 
method for use in a network environment including an enterprise server, the 
method comprising: 

storing at the enterprise server multiple security credentials for a remote 
user to access respective secure resources residing on a network employing a 
generic application layer network protocol; 

maintaining a map between one or more resource servers and a type of 
security credential required to access each resource server; 

receiving at the server a signal representing a request from the remote 
user for a first of the secure resources , wherein the request includes a logon 
credential for the remote user : 

determining, by referring to the map and without the intervention of the 
user, the type of security credential for the remote user that is required to access 
the first secure resource; aft4 

sending from the server a signal representing a second request to retrieve 
the first secure resource, the second request including a first of the security 
credentials for the user of the type required to access the first secure resource; 

receiving at the server a signal representing a first sinale-sian-on (SSO) 
credential generated bv a first SSO provider based on the logon credential: 

sending from the server a signal representing the first SSO credential to 

retrieve the first secure resource when the type of credential required to access 
the first secure resource includes the first SSO credential: and 
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sending from the server a signal representing the first SSO credential to 
retrieve the first secure resource when the type of credential required to access 
the first secure resource includes a second SSO credential corresponding to a 
second SSO provider having a trust relationship with a first SSO provider . 

Claim 34 (original): The media of claim 33, wherein the method further 
comprises: 

authenticating the user before sending the signal representing the second 
request. 

Claim 35 (previously presented): The media of claim 33, wherein the method 
further comprises: 

receiving at the server a signal representing a response to the second 
request; and 

sending from the server a signal representing a result to the remote user, 
the result based on the response to the second request. 

Claim 36 (original): The media of claim 33, wherein the request includes a logon 
credential for the remote user, wherein the method further comprises: 

authenticating the remote user based on the logon credential before 
sending the second request. 

Claim 37 (previously presented): The media of claim 33, wherein the request 
includes a logon credential for the remote user and the type of security credential 
required to access the first secure resource includes the logon credential, 
wherein the method further comprises: 

sending from the server the signal representing the second request to 
retrieve the first secure resource, the second request including the logon 
credential. 



Page 12 of 28 



Appl. No. 10/004,301 

Amendment dated May 19, 2006 

Reply to Office Action mailed January 20, 2006 

Claim 38 (canceled): 

Claim 39 (canceled) 

Claim 40 (currently amended): Th e m e d i a of c l a i m 38, wh e r ei n th e m e thod 
furth e r compr i s e s: 

One or more computer-readable media tangibly embodying a program of 
instructions executable by a computer to perform a method for use in a network 
environment including an enterprise server, the method comprising: 

storing at the enterprise server multiple security credentials for a remote 

user to access respective secure resources residing on a network employing a 
generic application layer network protocol: 

maintaining a map between one or more resource servers and a type of 

security credential required to access each resource server; 

receiving at the enterprise server a signal representing a reguest from a 

the remote user for a first of the secure resources, wherein the reguest includes 
a logon credential for the remote user: 

determining, bv referring to the map and without the intervention of the 

user, the type of security credential for the remote user that is reguired to access 
the first secure resource: 

sending from the server a signal representing a second reguest to retrieve 

the first secure resource, the second reguest including a first of the security 
credentials for the user of the type reguired to access the first secure resource: 

receiving at the server a signal representing a single-sign-on (SSQ) 

credential generated by a SSO provider based on the logon credential: 

sending from the server a signal representing the SSO credential to 

retrieve the first secure resource when the type of credential reguired to access 
the first secure resource includes the SSO credential: 

receiving at the server a signal representing a second SSO credential 
generated by a second SSO provider based on the first SSO credential; and 



Page 13 of 28 



Appl. No. 10/004,301 

Amendment dated May 19, 2006 

Reply to Office Action mailed January 20, 2006 

sending from the server a signal representing tine second SSO credential 
to retrieve tlie first secure resource when the type of credential required to 
access the first secure resource includes the second SSO credential. 

Claim 41 (original): The media of claim 33, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 42 (previously presented): The media of claim 41 , wherein the method 
further comprises: 

receiving at the server a signal representing data in response to the 
second request; and 

sending from the server a signal representing at least a portion of the data 
to the remote user. 

Claim 43 (previously presented): The media of claim 42, wherein the first secure 
resource includes a Web site, and the data is hypertext mark-up language. 

Claim 44 (currently amended): Tho mod i a of c l a i m 33, 

One or more computer-readable media tangibly embodying a program of 

instructions executable by a computer to perform a method for use in a network 

environment including an enterprise server, the method comprisinq: 

storing at the enterprise server multiple security credentials for a remote 
user to access respective secure resources residing on a network employing a 
generic application layer network protocol: 

maintaining a map between one or more resource servers and a type of 

security credential reouired to access each resource server: 

receiving at the enterprise server a signal representing a reouest from a 

the remote user for a first of the secure resources, wherein the request includes 
a loqon credential for the remote user; 
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determining, bv referring to the map and without the intervention of the 

user, the type of security credential for the remote user that is reouired to access 
the first secure resource: 

sending from the server a signal representing a second recuest to retrieve 

the first secure resource, the second recuest including a first of the security 
credentials for the user of the type reouired to access the first secure resource. 
wherein the receiving includes receiving at the server a signal representing a 
third request from the remote user for a second secure resource residing on the 
network, wh e rein th e m e thod furth e r compris e s: 

determining, without the intervention of the user, the type of security 
credential for the remote user that is required to access the second secure 
resource; and 

sending from the server a signal representing a fourth request for 

retrieving the second secure resource, the fourth request including a second 
security credential for the user of the type required to access the second secure 
resource; and 

wherein the signals representing the second and fourth requests are sent 
concurrently. 

Claim 45 (previously presented): The media of claim 44, wherein the types of 
security credentials included in the second and fourth requests differ. 

Claim 46 (previously presented): The media of claim 44, wherein the types of 
security credentials included in the second and fourth requests are the same. 

Claim 47 (currently amended): Tho mod i o of c l a i m 33, whoro i n tho method 
further compr i ooG: 

One or more computer-readable media tangibly embodying a program of 
instructions executable by a computer to perform a method for use in a network 
environment including an enterprise server, the method comprising: 
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storing at the enterprise server multiple security credentials for a remote 
user to access respective secure resources residing on a network employing a 
generic application layer network protocol: 

maintaining a map between one or more resource servers and a type of 

security credential reouired to access each resource server: 

receiving at the enterprise server a signal representing a recuest from a 

the remote user for a first of the secure resources, wherein the request includes 
a logon credential for the remote user: 

determining, by referring to the map and without the intervention of the 

user, the type of security credential for the remote user that is required to access 
the first secure resource: 

sending from the server a signal representing a second request to retrieve 

the first secure resource, the second request including a first of the security 
credentials for the user of the type required to access the first secure resource: 
and 

receiving at the server a signal representing the first security credential 
from the user before receiving the signal representing the first request. 

Claim 48 (canceled). 

Claim 49 (new): The method of claim 8, further comprising: 

authenticating the user before sending the signal representing the second 
request. 

Claim 50 (new): The method of claim 8, further comprising: 

receiving at the server a signal representing a response to the second 
request; and 

sending from the server a signal representing a result to the remote user, 
the result based on the response to the second request. 
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Claim 51 (new): The method of claim 8, wherein the request includes a logon 
credential for the remote user, the method further comprising: 
authenticating the remote user based on the logon credential before sending the 
second request. 

Claim 52 (new): The method of claim 8, wherein the request includes a logon 

credential for the remote user and the type of security credential required to 
access the first secure resource includes the logon credential, the method further 
comprising: 

sending the signal representing the second request to retrieve the first 
secure resource, the second request including the logon credential. 

Claim 53 (new): The method of claim 8, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 54 (new); The method of claim 53, further comprising: 

receiving at the server a signal representing data in response to the 

second request; and 

sending from the server a signal representing at least a portion of the data 

to the remote user. 

Claim 55 (new): The method of claim 54, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 

Claim 56 (new): The method of claim 12, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 57 (new): The method of claim 56, further comprising: 

receiving at the server a signal representing data in response to the 
second request; and 
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sending from the server a signal representing at least a portion of the data 
to the remote user. 

Claim 58 (new): The method of claim 57, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 

Claim 59 (new): The method of claim 15, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 60 (new): The method of claim 59, further comprising: 

receiving at the server a signal representing data in response to the 

second request; and 

sending from the server a signal representing at least a portion of the data 

to the remote user. 

Claim 61 (new): The method of claim 60, wherein the first secure resource 
Includes a Web site, and the data is hypertext mark-up language. 

Claim 62 (new): The apparatus of claim 24, wherein the generic application- 
layer network protocol is hypertext transfer protocol. 

Claim 63 (new): The apparatus of claim 62, further comprising: 

means for receiving at the server a signal representing data in response to 

the second request; and 

means for sending from the server a signal representing at least a portion 

of the data to the remote user. 

Claim 64 (new): The apparatus of claim 63, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 
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Claim 65 (new): The apparatus of claim 24, wherein the means for receiving 
includes means for receiving at the server a signal representing a third request 
from the remote user for a second secure resource residing on the network, the 
apparatus further comprising: 

means for determining, without the intervention of the user, the type of 
security credential for the remote user that is required to access the second 
secure resource; and 

means for sending from the server a signal representing a fourth request 
to retrieve the second secure resource, the fourth request including a second of 
the security credentials for the user of the type required to access the second 
secure resource; and 

wherein the signals representing the second and fourth requests are sent 
concurrently. 

Claim 66 (new): The apparatus of claim 65, wherein the types of security 
credentials included in the second and fourth requests differ. 

Claim 67 (new): The apparatus of claim 65, wherein the types of security 
credentials included in the second and fourth requests are the same. 

Claim 68 (new): The apparatus of claim 24, further comprising: 

means for receiving at the server a signal representing the first security 
credential from the user before receiving the signal representing the first request. 

Claim 69 (new): The media of claim 40, wherein the method further comprises: 
authenticating the user before sending the signal representing the second 
request. 

Claim 70 (new): The media of claim 40, wherein the method further comprises: 
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receiving at the server a signal representing a response to the second 
request; and 

sending from the server a signal representing a result to the remote user, 
the result based on the response to the second request. 

Claim 71 (new): The media of claim 40, wherein the request includes a logon 
credential for the remote user, wherein the method further comprises: 

authenticating the remote user based on the logon credential before 
sending the second request. 

Claim 72 (new): The media of claim 40, wherein the request includes a logon 
credential for the remote user and the type of security credential required to 
access the first secure resource includes the logon credential, wherein the 
method further comprises: 

sending from the server the signal representing the second request to 
retrieve the first secure resource, the second request including the logon 
credential. 

Claim 73 (new): The media of claim 40, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 74 (new): The media of claim 73, wherein the method further comprises: 
receiving at the server a signal representing data in response to the 

second request; and 

sending from the server a signal representing at least a portion of the data 

to the remote user. 

Claim 75 (new): The media of claim 74, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 
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Claim 76 (new): The media of claim 44, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 77 (new): The media of claim 76, wherein the method further comprises: 
receiving at the server a signal representing data in response to the 

second request; and 

sending from the server a signal representing at least a portion of the data 

to the remote user. 

Claim 78 (new): The media of claim 77, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 

Claim 79 (new): The media of claim 47, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 80 (new): The media of claim 79, wherein the method further comprises: 
receiving at the server a signal representing data in response to the 

second request; and 

sending from the server a signal representing at least a portion of the data 

to the remote user. 

Claim 81 (new): The media of claim 80, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 

Claim 82 (new): The media of claim 47, wherein the generic application-layer 
network protocol is hypertext transfer protocol. 

Claim 83 (new): The media of claim 82, wherein the method further comprises: 

receiving at the server a signal representing data in response to the 
second request; and 
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sending from the server a signal representing at least a portion of the data 
to the remote user. 

Claim 84 (new): The media of claim 83, wherein the first secure resource 
includes a Web site, and the data is hypertext mark-up language. 
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